From 50764a916d81b1942e69a1a063e871d1d2c8f70d Mon Sep 17 00:00:00 2001 From: npeter83 Date: Tue, 20 Oct 2026 23:14:37 +0200 Subject: [PATCH] fix(deps): certifi 2026.10.19 (GHSA-6q48-6c7w-9gw2) --- backend/requirements.lock | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/backend/requirements.lock b/backend/requirements.lock index a85fbfbb..88f15315 100644 --- a/backend/requirements.lock +++ b/backend/requirements.lock @@ -5,7 +5,8 @@ # scans it, blocking. A security fix, or a yt-dlp release YouTube's changes force, may be ONE pin # bumped in place instead of a full regeneration, which would move every other package too — then # `pip install -r requirements.lock && pip check` must pass. In place so far: urllib3 2.7.0 -> 2.8.0 (PYSEC-2026-4175/4176/4177); yt-dlp 2026.7.4 -> 2026.8.19 -# (it marks the clients that need a stream PO token, so the downloader stops fetching into a 403). +# (it marks the clients that need a stream PO token, so the downloader stops fetching into a 403); +# certifi 2026.7.22 -> 2026.10.19 (GHSA-6q48-6c7w-9gw2). APScheduler==3.11.3 Authlib==1.7.2 Mako==1.4.1 @@ -21,7 +22,7 @@ argon2-cffi-bindings==25.1.0 argon2-cffi==25.1.0 bgutil-ytdlp-pot-provider==1.3.1 brotli==1.2.0 -certifi==2026.7.22 +certifi==2026.10.19 cffi==2.1.1 charset-normalizer==3.5.1 click==8.4.2